Foundations of DevSecOps

Description

This course focuses on building security into your DevOps process and leveraging security requirements to guide testing efforts. Participants explore key aspects of security testing, including web security, threat modeling, risk assessment, and multiple security analysis techniques, to understand how these practices integrate effectively into a DevOps pipeline.

If your organization has already moved toward a DevOps way of thinking but security testing is missing from the pipeline, this course is designed to help you transition into a practical DevSecOps approach. The emphasis is on hands-on work with configuring and using security tools, understanding where they fit in the pipeline, and learning how DevSecOps extends DevOps principles with meaningful security practices.

Key takeaways from this class include:

• Build security into your DevOps process rather than treating it as a late-stage activity
• Use security requirements to shape testing efforts across the delivery pipeline
• Understand and apply risk assessment and threat modeling techniques
• Improve visibility with log management, monitoring, and SIEM capabilities
• Compare and apply SCA, SAST, DAST, and advanced security testing approaches such as IAST, RASP, and HAST
• Understand security requirements testing, misuse and abuse cases, and the role of penetration testing
• Gain hands-on experience configuring and using practical security tools

By the end of this course, participants will better understand how to integrate security into delivery pipelines, select appropriate security techniques for different stages, and strengthen the connection between development, testing, security, and operations.

Who Should Attend

This class is intended for software professionals involved with development, testing, security, and operations. It is most appropriate for practitioners and is not specifically tailored toward management or leadership audiences.

Preparation

Each student should bring a laptop with an SSH or PuTTY client preinstalled. Connection details and credentials will be provided during class. Attendees should verify any required permissions with their IT administrator before the course.